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ABSTRACT 



An onboard computer is used to control many aspects of a 
vehicle including performance and ride characteristics. Used 
in combination with the onboard computer, a smart card key 
is used to authorize a user. In addition, the smart card key 
stores user preference data, such as performance and ride 
parameters, which are in turn used by the onboard computer 
to adjust performance and ride characteristics of the vehicle. 
Because the parameters are stored on individual smart card 
keys, each operator of the vehicle stores user parameters 
specific to each user. User parameters may also be stored in 
the computer memory itself. Access to the user preference 
data is controlled by user identification parameters that are 
also stored on a smart card memory or in the memory of the 
computer. These user identification parameters may include, 
for example, user identification by a combination of means 
including a password, finger print, eye print and/or voice 
print or other biologic attributes unique to the user. 

34 Claims, 11 Drawing Sheets 
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METHOD AND APPARATUS FOR SETTING however, as well as a preferred mode of use, further objec- 

AUTOMOTIVE PERFORMANCE TUNED lives and advantages thereof, will best be understood by 

PREFERENCES SET DIFFERENTLY BY A reference to the following detailed description of an illus- 

DRIVER trative embodiment when read in conjunction with, the 

BACKGROUND OF THE INVENTION 5 accompanying drawings, wherein: 

1. Technical Field FIG. 1 depicts a block diagram illustrating a data pro- 
The present invention relates to a vehicle onboard com- cessin S s y stem of the P resent invention - 

puter system that controls various vehicle onboard systems FIG. 2 depicts the onboard systems of the present inven- 

and subsystems. More specifically, the present invention tion as defined in a preferred embodiment of the present 

relates to a system and method for implementing user- 10 invention. 

specific preferences on the vehicle onboard computer system FIG. 3 depicts the suspension and ride system of the 

for regulating the operation of vehicle onboard systems. Still vehicle. 

more particularly, the present invention relates to a system A ... . c A c . , . . ; 

j »i_ j c j *-c • i .« • • j • i FIG. 4 illustrates the comfort system of the vehicle, 

and method for identifying and authorizing users and imple- J 

menting user-specific parameters associated with the users. 15 FIG. 5 illustrates another system under the control of the 

2. Description of Related Art onboard computer, the communications interface system. 
It has been well known in prior art to limit the access and FIG 6 illustrates another system under the control of the 

operation of a vehicle by granting authority of the user to onboard computer, the navigation and tracking system, 

operate a vehicle with such devices as a mechanical key. In FIG. 7 illustrates another system under the control of the 

the prior art, any person who obtained the mechanical key 20 onboard computer, the audio system, 

could generally operate the vehicle. Other systems require FIG. 8 illustrates the safety system as implemented in the 

verification by such methods as inputting a password or present invention. 

personal identification number, in addition to or in place of FIG. 9 illustrates the engine performance system as 

using a mechanical key. ^ related to thc prescnt invcntion( 

As the sophistication and comfort of the vehicles CTr , 1A .„ . . f „ ■ , 

- . r . e . . , , FIG. 10 illustrates the user interface system as lmple- 

increased, the number of vehicle systems and subsystems _ . , . t . „ TOM „ t : n ^ ntirs „ 

' „ „ T . . , . . ' mented in the present invention, 

increased proportionally. With each system and subsystem, r 

the user was required to make a number of adjustments to FIG - 11 illustrates one embodiment of the present 

the individual systems for the user to gain the maximum , n mention, the process of a user being granted access to the 

benefit from that system. Generally, when the user entered 30 user s P ecific preferences. 

the vehicle subsequent to operation by another user, each FIGS. 12 and 13 illustrate one embodiment of that modi- 
one of these setting would have to be readjusted for the fication process. 

vehicle to be operated. Initially, most of these settings were FIG. 14 illustrate the data structure stored in memory of 

adjusted manually. As the complexity of systems and sub- ^ the present invention. 

systems advanced more an more, the systems could be p IG 15 illustrates the user ID data structure, 

adjusted remotely from a central location. However, prior M ^ verification data structure . [ 

systems still were unable to index the adjustments made to , . . , 

the different subsystems with a specific user. Still more 17 States the security level data structure. ■ 

crucial to the safe operation of a vehicle, there was no FIG. 18 illustrates an extremely abbreviated data structure 

reliable method for identifying an authorized user or even of possible preferences. 

distinguishing one user from another. Therefore, it would be FIG. 19 illustrates the preference limits data structure, 

advantageous to have an improved method and apparatus for FIG. 20 illustrates the data structure of user logged data, 

adjusting preferences in a vehicle. piG. 21 illustrates an example of how the onboard com- 

SUMMARY OF THE INVENTION 45 P uter authorizes user preferences by user security level. 

An onboard computer is used to control many aspects of DETAILED DESCRIPTION OF THE 

a vehicle including performance and ride characteristics. PREFERRED EMBODIMENT 

Used in combination with the onboard computer, a smart . . , * , , , 

card key is used to authorize a user. In addition, the smart , ^ present invention provides for a method and means 

card key stores user preference data, such as performance 50 for implementing user specific preferences to onboard sys- 

and ride parameters, which are in turn used by the onboard teras on a vehicle ' Heretofore user specific preferences were 

computer to adjust performance and ride characteristics of unknown because onboard t ***' could not chscrimi- 

the vehicle. Because the parameters are stored on individual nate between users identities but would instead discriminate 

smart card keys, each operator of the vehicle stores user between access keys, either mechanical or personal identi- 

parameters specific to each user. User parameters may also *s fication numbers. The present invention mcorporates user 

be stored in the computer memory itself. Access to the user ^cation for pos.Uvely verifying the user and indexing 

preference data is controlled by user identification param- user specific preferences to that user whereby the user need 

eteis that are also stored on a smart card memory or in the not make adjustments to the various onboara systems each 

memory of the computer. These user identification param- ' ,me * e ]f r acccs ?« ,h f vehlclc - ™ e P resent ln ™\ Uon ,s 

eters may include, for example, user identification by a 60 described herein with reference :to a preferred embodiment 

combination of means including a password, finger print, of ^ onboard systems (FIGS. 1 to 10) a process for 

eye print and/or voice print or other biologic attributes practicing the present mvennon implemented on the onboard 

unique to the user. s y slem ( mGS 11 t0 13 > md flnall y> w,th reS P eCt . l0 an 

embodiment of a data structure used in conjunction with the 

BRIEF DESCRIPTION OF THE DRAWINGS 65 process (FIGS. 14 to 21). 

The novel features believed characteristic of the invention With reference now to FIG. 1, a block diagram illustrates 

are set forth in the appended claims. The invention itself, a data processing system in which the present invention may 
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be implemented. Data Processing system 100 is an example without relying on some type of network communication 

of a client computer. Data Processing system 100 employs interface, whether or not Data Processing system 100 com- 

a peripheral component interconnect (PCI) local bus arcbi- prises some type of network communication interface. As a 

lecture. Although the depicted example employs a PCI bus, further example, Data Processing system 100 may be a 

other bus architectures such as Micro Channel and ISA may 5 Personal Digital Assistant (PDA) device which is configured 

be used. Processor 102 and Main Memory 104 are connected ^ R0M ^d/or flash ROM in order to provide non- 

to PCI local Bus 106 through Host/PCI Cache/Bridge 108. volatile memory for storing operating system files and/or 

Host/PCI Cache/Bridge 108 also may include an integrated user-generated data. 

memory controller and cache memory for Processor 102. ^ , . . , - . - , , , ... 

A ...,. , , Dr > T , , t» u _i The depicted example m FIG. 1 and above-described 

Additional connections to PCI local Bus 106 may be made in , , r . . , ... . 

. . . „ 4 . *i_ i_ jj • 10 examples are not meant to imply architectural limitations 

through direct component interconnection or through add-in . . r . « . • »,,. . t-i/^ -i 

u j i .u j ■ « j it i a Mt ,/TAxn Wlt h respect to the present invention. Although FIG. 1 

boards. In the depicted example, Local Area Network (LAN) r tec *• r * . 

a j . 1 1 a crciu *o aj * hi • provides examples of configurations of computer systems on 

Adapter 110, SCSI Host Bus Adapter 112, and Expansion . • . . « r . 9 . tU r n ■ 

r» i . _^ ,1. « . „ ¥ . , „ in^r i_ which the present invention may execute, the following 

Bus Interface 114 are connected to PCI local Bus 106 by , . /. - 7 \ , * A 

t . T , 4 a j- a j * background information may provide a context for under- 
direct component connection. In contrast, Audio Adapter 14 - . ft „ ;. r . . . 
n , P ,f AJ 4 110 j a j- Ar/ a j * / An a standing the overall computing environment in which the 
116, Graphics Adapter 118, and Audio/Video Adapter (A/V) * u j 
l1ft r t .\ „ . ^ in ,, ,. r . , v « present invention may be used. 
119 are connected to PCI local Bus 106 by add-in boards r ' 

inserted into expansion slots. Expansion Bus Interface 114 FIG - 2 describes the systems of the present invention as 

provides a connection for a Keyboard and Mouse Adapter defined in a preferred embodiment of the present invention. 

120, Modem 122, and additional Memory 124. Additional 9n In the P resent invention, the vehicle may contain one or 

Memory 124 may consist of any type of memory including more 0nboard Computers) 20. Users control different sys- 

flash memory. SCSI Host Bus Adapter 112 provides a lems Wlthin the vemcle throu g h Onboard computer 20. A 

connection for hard Disk drive 126, Tape drive 128, and s P ecific ™* can onl y Z™> as much control of a s y stem or 

CD-ROM drive 130. Typical PCI local bus implementations subsystem as authorized by Onboard Computer 20. A user 

will support three or four PCI expansion slots or add-in « may fdlmto one or more security levels(s), for instance, low 

connectors ^ eve ^ ^cu^ty, master level security, administrator, service 

An operating system runs on Processor 102 and is used to a f ndant > P**^ attendant or semi-usei: The varying levels 

coordinate and provide control of various components of secunty allow users having duTerent access pnonUes o 

within Data Processing system 100 in FIG. 1. The operating onl y s y slems auth f nzed b ? *" le , ve l °[ xmnt V 

system may be a commercially available operating system 30 corresponds to the user s secunty level. Other, more 

such as OS/2, which is available from International Business 'peaalized county levels might also be available for special 

Machines Corporation. "OS/2" is a trademark of Interna- P^P 05 ? ^ ' ^ f F 

tional Business Machines Corporation. The operating sys- driver levels which severely hmit access and performance of 

tern may be a real time operating system (RTOS), such as &e ve 1C e * 

QNX Neutrino™ from QNX Software Systems Ltd., 175 35 Implementing the different security levels is primarily a 
Terranence Matthews Crescent, Kanata, Ontario, Canada software function which authorizes security levels in a series 
K2MLW8. An object oriented programming system such as of IF tests in a logic flow. This software function is an 
Java may run in conjunction with the operating system and extremely effective means of implementing secunty levels 
provide calls to the operating system from Java programs or because the preferred embodiment consists of a closed 
applications executing on Data Processing system 100 via a 40 svstem which is Protected from arbitrary software being 
Java Virtual Machine. "Java" is a trademark of Sun installed from unknown sources. Alternatively, each security 
Microsystems, Inc. Instructions for the operating system, the level 00111(3 be a separate level of hardware. Onboard Corn- 
object-oriented operating system, and applications or pro- P uter 20 also contains an onboard computer Memory 22 
grams are located on storage devices, such as hard Disk which would store ^ software logic described above, 
drive 126, and may be loaded into Main Memory 104 for 45 Onboard Computer system 20 is intended to be exemplary in 
execution by Processor 102. nature, and it is not intended in any way to restrict the 

lliose of ordinary skill in the art will appreciate that the implementation of this invention, 

hardware in FIG. 1 may vary depending on the implemen- In one embodiment of this invention, Onboard Computer 

tation. Other internal hardware or peripheral devices, such as 20 controls several onboard systems through its different 

flash ROM (or equivalent nonvolatile memory) or optical 50 security levels. For simplicity, the invention is described 

disk drives and the like, may be used in addition to or in largely as consisting of two security levels, low and high, 

place of the hardware depicted in FIG. 1. Also, the processes corresponding to two different levels of user security. One 

of the present invention may be applied to a multiprocessor feature of this invention is that accessing and changing 

data processing system. preferences relating to any one of these systems can be done 

For example, Data Processing system 100, if optionally 55 onl y b V the ^ who has a corresponding security level for 

configured as a network computer, may not include SCSI lhe secunty level which controls the specific system. 

Host Bus Adapter 112, hard Disk drive 126, Tape drive 128, Taking first the lower level security, a low level security 

and CD-ROM 130, as noted by dotted line 132 in FIG. 1 user may access and change preference settings for one or 

denoting optional inclusion. In that case, the computer, to be more of the following onboard systems: Suspension and 

properly called a client computer, must include some type of 60 Ride system 300; Comfort system 400; communications/ 

network communication interface, such as LAN Adapter Interface system 500; Navigation and Tracking system 600; 

110, Modem 122, or the like. For mobile vehicle Audio system 700; and Systems Monitoring system 290 for 

applications, the preferred network communication interface the above-mentioned onboard systems, 

might be a wireless network circuit for communicating A user possessing a higher security level, such as a master 

digital packets of information to and from the central fleet 65 security level as authorized by Onboard computer 20, in 

server. As another example, Data Processing system 100 addition to resetting and adjusting the preference settings for 

may be a stand-alone system configured to be bootable the systems requiring a lower level security level for access, 
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may also adjust the preference settings of the systems 
requiring a higher level of security for authorization. Higher 
level security authorization is required for: Safety system 
800; Engine Performance system 900; and Theft Deterrence 
and Recovery system 210. 

FIG. 3 depicts the suspension and ride system of the 
vehicle. The dashed line around the subsystems depicts 
which functions are controlled by the system. Suspension 
and Ride system 300 and associated subsystems are con- 
trolled by preferences which set functions associated with 
the particular subsystems. Suspension and Ride system 300 
includes Suspension Performance Tuning 350. By the user 
specifying suspension performance tuning parameters, the 
vehicle's ride attributes, such as pitch, yaw, roll and 
stiffness, can be changed. 

As the user is identified through the use of a user ID via 
User Interface 28, Onboard Computer 20 extracts certain 
performance settings from onboard Memory 22 which are 
indexed to the user's name or ID number. These perfor- 
mance settings include user specific parameters which are 
used to modify each of the functions described above. One 
example is that a user may prefer a stiffer ride and may 
prefer a certain feel when he operates the vehicle. Therefore, 
the user may select certain parameters having to do with 
suspension performance tuning to affect the vehicle's ride. 
These parameters adjust each one of the functions men- 
tioned above associated with the subsystem in order to give 
that user the ride which he desires. 

Systems Monitoring 290 continually monitors pitch, yaw, 
roll and stiffness attributes of the vehicle's ride and transmits 
the information to Onboard Computer system 20. In another 
embodiment of this invention, Systems Monitoring system 
290 continually updates the suspension performance tuning 
in order to maintain that overall riding effect desired by the 
user. Therefore, as suspension and ride parts such as tires, 
shocks, struts, springs and bearings wear, Systems Monitor- 
ing system 290 monitors each one of the functions for the 
desired effect. If the results monitored by Systems Moni- 
toring system 210 are not within the user's set preference, 
Onboard computer system 20 may attempt to adjust each 
one of the functions automatically in an attempt to adjust the 
ride to the user's desired preferences — in other words, reset 
the user specified ride parameters automatically. 

In another embodiment, the user merely sets parameters 
associated with suspension performance tuning, and Sys- 
tems Monitoring system 290 merely monitors the functions 
and transfers the functional output to Onboard Computer 20. 
In this embodiment, it is left up to the user to manually set 
each one of the ride and suspension parameters, and as the 
parts of the vehicle change with respect to wear or damage, 
the user is expected to manually update each one of the 
parameters. Although this is possible, it is unlikely that the 
ordinary user would possess the skill necessary to make 
those adjustments autonomously, thus requiring Onboard 
Computer 20 to calculate those functional parameters for the 
user. Therefore, while expert drivers such as race car drivers, 
mechanics and the like may possess the knowledge needed 
to adjust these parameters, the ordinary weekend vehicle 
operator might rely on a routine stored within Onboard 
Computer 20 to make those adjustments. 

FIG. 4 illustrates another system under the control of 
every user, the Comfort system 400. Comfort system 400 
includes: Air Temperature and Flow subsystem 410; Seats 
and Steering Wheel subsystem 420; and Mirrors and Win- 
dows subsystem 430. Once the user has ben identified by 
Onboard Computer 20 via User Interface 28, Onboard 
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Computer 20 retrieves user specific parameters from system 
Memory 22. Those user specific parameters are used to 
adjust the various subsystems of Comfort system 400. If a 
user enjoys the air temperature somewhat lower and the flow 

5 higher than other users, as the user is identified by Onboard 
Computer 20, Air Temperature and Flow subsystem 410 are 
automatically adjusted to the user specific parameters stored 
in Memory 22. Therefore, the user would not have to 
readjust the air temperature and flow parameters every time 

10 the user enters the car, but rather merely satisfy identification 
to Onboard Computer 20, and Onboard Computer 20 would 
retrieve the user's specific user parameters from Memory 22 
and adjust Comfort system 400 accordingly. 

In the depicted example, other conveniences controlled by 

15 Comfort system 400 include adjusting seats and steering 
wheel position, and mirrors and windows for particular 
users. As the user's height and proportions tend to change 
from user to user, it would be advantageous for each user to 
preset such settings as the seat position setting and the 

20 steering wheel position, along with mirror positions and 
window positions for the individual user. As the user drives 
the vehicle, and climate conditions or tastes change, the user 
may have occasion to adjust certain of the above-mentioned 
subsystems. As the user adjusts the subsystems, Systems 

25 Monitoring system 290 notes these adjustments and trans- 
mits the adjustments to Onboard Computer 20, Onboard 
Computer 20 then may store the adjustments to system 
Memory 22. On exiting the vehicle, the user need not reset 
the various user parameters that were initially stored in 

30 Memory 22, as these have been updated while the user 
operated the vehicle. 

In one embodiment, Onboard Computer 20 merely retains 
the updated user specific parameters within Memory 22 as 
the user exits the vehicle, retrieving them again as the user 

35 specific parameters when the user is again identified to 
Onboard Computer 20. In another embodiment, updates fed 
to Onboard Computer 20 via Systems Monitoring system 
290 are merely transient. In that embodiment, the updates 
are lost once the user exits the vehicle unless the user takes 

40 some affirmative action to save them. In that embodiment, 
once the user exits the vehicle the updated parameters are 
lostjn lieu of the initial user specific parameters, 

FIG. 5 illustrates another system under the control of the 

4S onboard computer, the communications and interface sys- 
tem. Another system that may be under the control of lower 
level security users is Communications/Interface 500. In a 
fully integrated onboard computer system, the ability to 
access large amounts of data for the convenience and safety 

5Q of the operator becomes more and more important. Also, as 
the complexity of vehicles increases, the maintenance of 
those vehicles is expedited by allowing access to Onboard 
Computer 20 and the various systems through a specialized 
maintenance interface. 

55 One embodiment of the present invention, 
Communications/Interface system 500, consists of various 
subsystems as fulfill the various above-mentioned needs. 
These include: Satellite Com Line 510; Cellular/PCS com- 
munications 520; Personal Area Network Port 530; Fleet 

60 Docking Port 540; Maintenance Port 550; Home Docking 
Port 560; and Regulatory Docking Port 570. Depending 
upon the intended use of the vehicle, some or all of these 
communications subsystems may be eliminated or substi- 
tuted with other types of communications subsystems. 

65 Other subsystems, such as Satellite Com Link 510 and 
Cellular/PCS communications 520 may contain extensive 
local memories for holding user specific data like earth link 
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addresses and telephone numbers. Alternatively, earth link the user's home computer, the fleet operations could inter- 
addresses and telephone numbers may be stored on a per- face with the computer, for instance while the operator was 
sonal memory such as a SmartCard or magnetic swipe card, away or asleep or on another task. In this way, Memory 22 
or in system Memory 22, and indexed by user. in Onboard Computer 20 could be uploaded with pertinent 

In one example of the communications subsystems, for 5 information about an upcoming trip, 

instance a fleet vehicle operation, vehicles could be con- FIG. 6 illustrates another system under the control of the 

tinually tracked via Satellite Com Link 510. The fleet onboard computer, the navigation and tracking system, 

dispatcher, therefore, could watch the progress of vehicles Another important onboard system is Navigation and Track- 

and goods from the origin to the destination. If the dis- ing system 600. A typical Navigation and Tracking system 

patcher detects a delay somewhere along the route, the 10 600 may include GPS 610 for ascertaining the exact vehicle 

dispatcher could immediately contact the vehicle through position via geosynchronous positioned satellites. Maps and 

Cellular/PCS 520 link or Satellite Com Link 510 to ascertain Databases 620 would probably reside in the system Memory 

the problem and try to help the vehicle operator formulate an 22. Maps and Databases 620 might also be fairly transient, 

alternate route. being uploaded and downloaded as the intended route of the 

Personal Area Network (PAN) Port 530 would be useful 15 vehicle changes. In another aspect of the invention, Maps 

for such things as ascertaining if a vehicle is authorized to, and Databases 620 may be downloaded via Satellite Com 

for instance, go through a toll booth. There, Onboard Com- Link 510 or Cellular/PCS 520 connection to the vehicle's 

puter 20 would automatically link with a computer at the toll home terminal. 

booth via Personal Area Network Port 530 and communicate Navigation and Tracking system 600 may also include 

to the toll booth computer an electronic cash account num- 20 Locator Beacon 630. While Locator Beacon 630 could take 

ber by which the toll computer could access and debit the many forms and work in cooperation with one of the 

cash amount of the toll, thereby eliminating the need for the communication systems, either Satellite Com Link 510 or 

driver of the vehicle to stop the vehicle and pay a toll. This Cellular/PCS 520, Locator Beacon 630 may be a separate 

would also eliminate the need for the driver to carry any cash subsystem providing a radio frequency beacon used to locate 

while enroute; and in fact, the vehicle itself may not ever 25 the vehicle in case of emergency or possibly to track vehicle 

need to have the cash account, as it could merely link to the movements within a local area for a fleet dispatcher. . 

home or fleet headquarters and debit a financial account for Another important set of tracking databases might be 

the cash. Maintenance Log 640 and Driving Log 650, which: are 

Another interface particularly helpful in fleet operation is 3Q somewhat related. For an expert mechanic to properly 

a Fleet Docking Port 540. Although in the preferred maintain a vehicle, it is useful to have within the vehicle's 

embodiment, Fleet Docking Port 540 is a specific hardware Maintenance Log 640 the prior routes and conditions in 

port, fleet docking may also be realized by using the wireless which that vehicle was driven. In that way, when the vehicle 

network circuit described above in reference to FIG. 1. Fleet experiences what appears to be a sudden loss in performance 

Docking Port 540 would be useful for an operation that 35 over the last few trips, a master mechanic can examine the 

tracks several vehicles up to several thousand vehicles. As log to note if any difference in the driving pattern exists, 

the vehicle would enter the home terminal, the vehicle could Along that same vein, Driving Log 650 could also be useful 

park for transfer of cargo or maintenance, or whatever, and to a master mechanic in examining the actual driving 

then be linked via Fleet Docking Port 540 to the terminal performance of the vehicle driver. Therefore, by carefully 

computer which in turn would be linked to the main opera- 4Q examining these two logs, a master mechanic might merely 

tional computer. Thus, as the truck receives maintenance, or conclude that what appears to be poor vehicle and engine 

on or off loads cargo, the information concerning the prior performance can merely be attributed to the change in 

trip could be downloaded from Onboard Computer 20 drivers, driving patterns or routes. 

Memory 22, and information pertaining to the next sched- Additionally, Driving Log 640 and Maintenance Log:650 

uled trip, including maps, itinerary, electronic cash and the 45 can be used together to assemble data in User Logged Data 

like, could be loaded onto Onboard Computer 20 Memory 2000, FIG. 20. User logged data is indexed by user and 

22. Vehicle operators could also be authorized and might contain fields such as the operation of the vehicle, a 

de- authorized for the vehicle. specific trip and other data. The log could be displayed on 

As noted above, detailed maintenance records are also User Interface 28 or at the user's home terminal by a user 

important, especially as the number of vehicles in a fleet 50 having an administrator security level. User Logged Data 

operation increases. Therefore, a specific Maintenance Port 2000 is an extremely useful resource for setting preference 

550 would be useful. Maintenance Port 550 would provide limits as shown on data structure 1900, FIG. 19. 

instant access to certain files or records and allow for testing With User Logged Data 2000, the performance of each 

of onboard systems simultaneously with other fleet interface user under a specific security level can be monitored by 

operations. While Maintenance Port 550 indicates that, 55 analyzing User Logged Data 2000, and specific preferences 

primarily, the access is limited to maintenance of the engine can be set for that user. For instance, if a suer appears to be 

and onboard systems and subsystems, Maintenance Port 550 prone to extremely fast accelerations, an administrator 

should also have access to Onboard Computer 20 main examining the Maximum Acceleration field of User Logged 

Memory 22 to ascertain such things as fuel and mileage logs, Data 2000, may limit that user. The administrator can limit 

distances traveled, environments traveled in and the like. In 60 vehicle acceleration to a more moderate rate by changing 5 

this way, an expert mechanic could determine the overall feet per second 2 to 3.5 feet per second 2 in the Maximum 

maintenance condition of the unit by comparing it to its Forward Acceleration field of Performance Limits data 

previous performance. structure 1900. 

Home Docking Port 560 would also be useful in a fleet Working in close association with Navigation and Track- 
operation where the vehicle operator may be required to 65 ing system 600 would be Communications/Interface system 
bring the vehicle home. In that case, the vehicle operator 500 and especially Cellular/PCS subsystem 520. 
would merely dock the vehicle at the home port and, using Additionally, Theft Deterrence and Recovery system 210 
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and Collision Avoidance subsystem 870 of Safety system vehicle may be limited to a prescribed route of travel and 

800 could also make extensive use of Navigation and any variation might be strictly prohibited. However, in most 

Tracking system 600. instances the parameters are not so strict as to allow the 

In one example, if a vehicle is identified as being stolen vehicle to be maneuvered around detours, 

or being used in an unauthorized manner, the vehicle can 5 FIG. 7 illustrates another system under the control of the 

automatically ascertain its position via use of GPS sub- onboard computer, the audio system. Another onboard sys- 

system 610 and Maps and Databases subsystem 620. tern which would be particularly convenient for multiple 

Onboard Computer 20 could then use Communications/ vehicle users would be Audio system 700. Audio system;700 

Interface system 500 to transmit the information through connects to Onboard Computer 20, which restricts access to 

either Cellular/PCS subsystem 520 or Satellite Com Link 10 users who do not possess the required security level. Users 

subsystem 510 to the fleet dispatcher or local authorities. such as parking attendants and the like who may be required 

Additionally, one it has been positively confirmed that the to operate the vehicle only for short distances, are ; not 

vehicle has been stolen, Locator Beacon 630 could be turned expected to use the vehicle's audio system. Audio system 

on to aid the police in determining the location of the 700 would allow each operator to select preferred AM/FM 

vehicle. 15 radio stations, compact disks or tape selections for listening. 

Another important feature of this invention, Safety system In addition, it would allow the individual users to select 

800, including Collision Avoidance subsystem 870, would unique preferences for volume levels, tone and other audio 

make extensive use of Maps and Databases 620 and GPS quality settings. Audio system 700 contains: Volume sub- 

610 subsystems in the event of an accident. For instance, system 710 for adjusting the volume of Audio system 700; 

Collision Avoidance subsystem 870 might, through some 20 Balance subsystem 720 for adjusting the balance between 

combination of events, detect that an accident that is likely left and right outputs of Audio system 700; Fade subsystem 

to cause injury or death is imminent. In that case, rather than 730 for adjusting front and rear outputs of Audio system 

waiting for the accident to actually occur, Onboard Com- 70 °; and Tone subsystem 740 or comparable subsystem for 

puter 20, using one of Communications/Interface 500 adjusting the frequency response or spectral response of the 

subsystems, either Cellular/PCS 520 or Satellite Com Link 25 outputted sound. Audio system 700 may also include Selec- 

510, can place an emergency call to the fleet dispatcher, to lor 750 > wnic ° selects the user specific devices such as CD, 

the vehicle's home or possibly to the local authorities, such ta P e > AM/FM radio or other possible outputs. Audio system 

as a 911 emergency call. In that way, once the accident 7( M) may also contain CD/Tape Carousel 760, which stores 

actually occurs and the vehicle becomes inoperable, includ- a variety of CDs or tapes on a ready-to-use basis, allowing 

ing Onboard Computer 20, a distress signal has already been 30 the user lo merely select from an available selection in 

issued by Onboard Computer 20. If, on the other hand, the CD/Tape Carousel 760 rather than having to reload CDs or 

accident which was determined by Onboard Computer 20 to ta P es - Finally, Audio system 700 could include AM/FM 

be imminent does not occur, or the severity of the accident Station Frequencies subsystem 770, which includes' the 

is limited, the user may merely cancel the imminent distress user's preferred station settings, along with possible station 

ca ll. 35 types and a menu of stations in the vehicle's area. 

Of course, under ordinary use, vehicles tend to break Audio system 700 works in a fashion similar to the other 

down or have mechanical difficulties of one type or another; systems in that the user is identified to Onboard Computer 

and somehow, the likelihood is that, when that occurs, the 20 via User Interface 28. Once the computer recognizes the 

vehicle operator will not have a clear idea of the vehicle's user, the computer then accesses audio preferences which 

location within a particular driving area. By using the 40 can be stored in computer Memory 22. Those preferences 

integrated Navigation and Tracking system 600, the vehicle &™ then transmitted to Audio system 700. 

operator can quickly determine the vehicle's location at the Pre-stored user specific preference settings for volume, 

time of the incident and, using Communications/Interface balance, fade and tone of the outputted audio adjust the 

system 500, call either a dispatcher, mechanic or a service 45 various subsystems such as Volume subsystem 710. Balance 

company for aide. subsystem 720, Fade subsystem 730 and Tone subsystem 

In other embodiments, performance limits may be 740. In addition, user-defined preferences stored in Memory 

adjusted to limit the maximum distance a vehicle is autho- 22 would determine which output device the user has chosen 

rized to travel from its home base or in deviation from a to listen to and transmit that information to Selector 750, 

predetermined route of travel. Working in combination with 50 which then activates the appropriate device, either radio or 

Safety system 800 and Engine Performance system 900, CD or tape. Once that device is activated, it in turn accesses 

Warnings, Gauges and Lights subsystem 830 uses visual or the tape and selection or CD and selection from the CD/Tape 

audio indicators to gently remind the vehicle operator that Carousel subsystem 760 or the AM/FM Station Frequencies 

the limits of travel are being exceeded (see FIG. 8). Finally, subsystem 770 and plays the appropriate selection which the 

when the infraction becomes critical, the vehicle is gently 55 user has predefined and stored in Memory 22. 

caused to come to a stop by reducing the maximum vehicle In addition, as the user operates the vehicle, Systems 

speed parameter limit which reduces the vehicle's speed Monitoring system 290 continually monitors manual adjust- 

using Vehicle Speed subsystem 920, FIG. 9. ments by the user to each one of these subsystems. Those 

However, prudent safety operation dictates that the adjustments can be used to update the user preferences in the 

vehicle should always be allowed to move very short 50 onboard system Memory 22. When the user exits the 

distances, such as one hundred feet, just in case the vehicle vehicle, these preferences may be used to replace the pre- 

operator becomes de-authorized at a point which is unsafe, vious user specific preferences stored in Memory 22 or may 

such as a railroad crossing. This gives the de-authorized merely be decimated in favor of the pre-stored user specific 

operator an extra measure of distance to travel. preferences in Memory 22. 

Finally, a user may be restricted from operating the 65 FIG. 8 illustrates Safety system 800 as implemented in the 

vehicle further than a certain number of miles from its home present invention. Safety system 800 is contained within the 

to reduce unauthorized trips and joy riding. A regular route dashed lines of FIG. 8. Safety system 800 of the present 
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invention is authorized only for higher security level users collision avoidance is expected in the future. A collision 

than the systems discussed thus far. Therefore, as the user avoidance subsystem may be further partitioned into front 

accesses Onboard Computer 20 via User Interface 28, the and rear subsystems or even into xyz direction subsystems 

user ID supplied by the user is ascertained by Onboard for vehicles that do not travel along a plane. In one 

Computer 20. The user ID is then compared to a list of IDs 5 embodiment, Collision Avoidance subsystem 870 is linked 

to ascertain the level of security that is authorized for the inexorably to Antilock Braking subsystem 820, Passenger 

user associated with this particular ID. Again, as in the other Restraints subsystems 840 and Airbags subsystem 810. In 

system described above, Onboard Computer 20 would then addition, Collision Avoidance subsystem 870 is connected to 

authorize the user's ID number and retrieve user specific Communications/Interface system 500. Collision Avoidance 

parameters from system Memory 22. The user is granted 1Q subsystem 870 will continually monitor the vehicle's posi- 

access to Safety system 800 only if the user is authorized for tion with respect to the positions of all other vehicles;and 

a higher level of security than the normal use. Therefore, obstacles in the proximity of the vehicle. Once the possi- 

Onboard Computer 20 will only grant control of Safety bility of a collision is detected by Collision Avoidance 

system 800 to users possessing a master or higher level of subsystem 870, Collision Avoidance subsystem 870 

security authorization. The user specific parameters would J5 attempts to warn the operator through Warnings, Gauges; and 

be accessed and applied to the various subsystems within Lights subsystem 830 using audible and visible alerts 

Safety system 800. Safety system 800 contains various intended to make the operator aware that a collision invplv- 

subsystems which relate to the safety of the vehicle. Those m g this vehicle is likely. 

subsystems include: Airbags 810; Antilock Braking 820; M ^ poim 5efore an imminent collision, Collision 

Warnings, Gauges and Lights 830; Passenger Restraints 2Q Avoidance subsystem 870 may act autonomously to avoid 

840; Exterior Lights 850; Spark and Fire Abatement 860; tne collision. For instance, Collision Avoidance subsystem 

and Collision Avoidance subsystem 870. 870 may M lhe ^mock brakes via Antilock Braking 

In one embodiment, Airbags 810, may be either enables or subsystem 820. Collision Avoidance subsystem 870 may 

disabled depending upon the user's preferences or safety a i so communicate to the local authorities :via 

needs. For instance, in normal user mode all of the airbags ^ Communications/Interface system 500 that a collision 

in the car would be active. However, certain users with involving the vehicle is likely or imminent. Collision Avoid- 

access to the necessary security level may disable certain ance subsystem 870 may also allow airbags to deploy faster 

airbags via Airbags subsystem 810. In cases where a parent by using Airbags subsystem 810 in combination with Col- 

always drives with a young child in a car seat, the airbags lision Avoidance subsystem 870. Then, rather than relying 

adjacent to the car seat might be disabled by setting the 30 0 n the airbags to deploy in response to impact sensors along 

appropriate user specific preferences. Alternatively, the user the bumpers and sides of the vehicle, the user modifies the 

of certain passengers might be of such slight stature that user specific parameters associated with Collision Avoid- 

deployment of the airbags may be more hazardous than the ance subsystem 870 to deploy the airbags when the vehicle 

accident itself, especially in a low-speed accident. In that reaches a threshold proximity to the obstruction. Therefore, 

case, that user may prefer to disable one or more of the 35 ra ther than the airbag being triggered by a certain amount of 

airbags in the passenger compartment via Airbags subsystem f ron t or read-end deformation of the vehicle, the airbag 

810. deployment is triggered just before the vehicle impacts with 

Other preferences might disable antilock braking for the obstruction, thereby saving valuable milliseconds in 
certain users via Antilock Braking subsystem 820. Also, deployment. Also, changing the user specific parameters to 
Warnings, Gauges and Lights subsystem 830 may have 40 deploy airbags sooner allows for lower speeds of accelera- 
preferences as far as warning defaults and the like, to be set tion within the airbags, which has been determined to be 
depending on the user's preferences. These may consist of advantageous to smaller and lighter users and passengers, 
configuring graphic displays to setting warnings messages as Another embodiment of the present invention, Theft 
either visual, text, voice or audio warnings. Passenger Deterrence and Recovery subsystem 210, might be con- 
Restraints subsystem 840 might be set to require all pas- 45 nec ted with both Antilock Braking subsystem 820 - and 
sengers to be fully restrained before the vehicle will move. Exterior Lights subsystem 850. This combination would 
One method of implementing this requirement totally within a u ow Theft Deterrence and Recovery subsystem 210 to 
Safety system 800 would be for vehicle Antilock Braking activate certain exterior lighting configurations and/or 
subsystem 820 to engage the brakes, thereby prohibiting the antilock brakes at certain times during a vehicle theft. In one 
vehicle from moving until all passengers are fully restrained. 50 example, the user may pre-set certain user specific param- 

Other subsystems include Exterior Lights subsystem 850, eters that would allow a vehicle theft to occur only in certain 

which monitors and controls the exterior lights. Therefore, places. For instance, it might be that the user would ailow 

when an exterior light burns out or is damaged, Systems the vehicle to be stolen from the user's home but not the 

Monitoring system 290 immediately communicates the sta- user's place of business. This is an important safety 

tus to Onboard Computer 20, and the information is con- 55 consideration, being that there is a likelihood of violence 

veyed to the user via User Interface 28 or through Warnings, occurring during a frustrated theft attempt. Therefore, in 

Gauges and Lights subsystems 830. Another subsystem attempt to avoid frustrating a potential vehicle thief at the 

important to safety is Spark and Fire Abatement subsystem user's home, the user may elect to allow the vehicle to be 

860. While most terrestrial vehicles possess only minimal stolen and then alert the local authorities ivia 

spark and fire subsystems, aircraft and marine vehicles 60 Communications/Interface system 500. In addition, Theft 

require more sophisticated spark and fire abatement sub- Deterrence and Recovery system 210 could reconfigure 

systems because of the lack of alternatives to operators of certain exterior lights that are not visible to the present 

non-terrestrial vehicles. unauthorized operator. For instance, a vehicle that is being 

Another subsystem important to the safety of operation is operated by an unauthorized user might be configured to 

Collision Avoidance subsystem 870. Because collision 65 flash one exterior brake light each time the brake pedal is 

avoidance is one of the most rapidly changing safety items pressed. Therefore, authorities witnessing a flashing rear 

on a vehicle today, even more advancement in the area of brake light might have reasonable suspicion to stop such a 
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vehicle and inspect it. In another embodiment, the Antilock Therefore, on certain days such as smog alert days and the 

Braking subsystem 820 may be set to trigger the brakes upon like, engine emissions may be set to an even stricter standard 

the unauthorized user traveling one or two miles from the via Engine Emissions subsystem 940. Clearly this would 

user's home. In that case, the vehicle would become com- have a detrimental effect on the performance of the vehicle 

pletely inoperable and the unauthorized user would hope- 5 ^ would not be appreciated by certain users. In a similar 

fully abandon the vehicle. Thus, the vehicle would be manner, Fuel Miser subsystem 950 may be set to require the 

available for safe recovery. vehicle's overall performance to maintain a certain vehicle 

FIG. 9 illustrates Engine Performance system 900 as fuel mQeage. Although the vehicle operator may be allowed 

related to the present invention. Like Safety system 800, one or two quick accelerations, thereafter the performance of 

Engine Performance system 900 requires higher level secu- 30 me vehicle would be strictly Jimited to make up for mose 

nty for authorization by Onboard Computer 20. User pref- accelerations and maintain the overall fuel efficiency of the 

erences are stored in Onboard Computer 20 system Memory vehicle. 

22 just as in the cases described above. Engine Performance n „ . AA . _ : 

•* nnn . A c . ... Z ■ j Finally, Engine Performance system 900 contains Loan/ 

system 900 consists of several possible subsystems, includ- A1 ... , , . , . J ctx , J/A ,.. 4 , AJ . t 
/ r • , T • *\ l * Altitude Adjustment subsystem 960. Load/Altitude Adjust- 
ing Engine RPM (i.e., revolutions per minute) subsystem A< . , \ ng:n J . tt _ , J c 
ni & ft w?, . , c \ u t ft ^ A »i « ■ j jl t J 4 . 15 ment subsystem 960 would change the engine s perfor- 
910; Vehicle Speed subsystem 920; Vehicle Acceleration , ' u . * c & ,. , r , - . 

. <io A • - •_ t ja v.. « mance depending upon the altitude of the vehicle and the 

subsystem 930; Engine Emissions subsystem 940; Fuel , , r , . r . tl _ ; . 

w . , ' n * « T ,, A ,,.^ « . «• ' , load the vehicle is carrying. Thus, when the vehicle is 

Miser subsystem 950; and Load/Altitude Adjustment sub- , mi j j «♦ ■ . ^ l 

n/TA tL ■ • j .«<• a , rC u a r> heavily loaded, as in the case of a truck pulling a boat, the 

system 960. Once the user is identified to Onboard Com- , . , c , . . u ? Z 

\ -» A • it i . _p r\ u ^ ♦ ™ vehicle performance characteristics would change from 

puter 20 via User Interface 28, Onboard Computer 20 on . . / . - . . .. . . , & . 

r . 4l _ i -f i i 20 being a faster or faster accelerating vehicle to that of being 

analyzes the user ID to ascertain the user s security level. r. . . . j . * . • • « u n 

_ , ^ . , , a vehicle that is more adept for towing, especially up hills, 

If the user has a sufficiently high security level, as boat afld ^ ^ ^ of ^ WQuld be at (he 

authorized by Onboard Computer 20 then the user may reset e of Qther formance characteristics in the sub- 

the user specific parameters for the engine performance svsiem 

subsystems in Engine Performance system 900. It would be 25 . ■ „ r »™ r- ■ ™ <• ««« 

conducive to safe operation of the vehicle for certain users As m Safety system 800 Engme Performance system ; 900 

who do not possess the necessary skill, age or expertise to would 1 be m^orably linked Jto Theft Deterrence and Recov- 

operate the vehicle safely, to be limited by the vehicle's ^ subsystem 210. Once Theft Deterrence and Recovery 

performance. One way to limit the vehicle's performance is subsystem 210 delected ™ unauthorized user the engine 

by limiting or restricting the engine's RPM via Engine RPM 3 o P erfonn f » parameters stored in Memory 22 would set 

subsystem 910. The engine might only be allowed to rev up Engme Performance system 900 to levels that would make 

to a certain level, say 4000 RPMs. Such a limitation would the vehicle W«M»- For instance, Vehicle Speed 920 

be advantageous where there is a possibility that a younger Peters might be set to limit the vehicle to zero speed, 

user might have the tendency to race an engine at a stoplight "id Engine RPM subsystem 910 might be set to limit (he 

• „ „ tn . . , ... T, DnVyr t „t,- u * A engine to zero RPM. Also, Vehicle Acceleration subsystem 

or in a garage to extremely high RPM levels which could 35 rt _ _ , * , , . , . . , , 

A ^ ^ • . °. „ f t * A ^ 1^ 930 could be set to zero. Thus, the vehicle s engme would 

damage the in tenor components or the engine. Another . ' & 

important aspect of the present invention is limitation of the be rendered inoperable. 

vehicle's speed via Vehicle Speed subsystem 920, Th Q process of the present invention as described with 

Invariably, speed is an important factor in both the frequency respect to FIGS. 1 to 10, will now be discussed with respect 

and severity of on-the-road accidents. By limiting the vehi- 40 t0 FIGS. 11 to 13. 

cle's speed for novice users, the number and severity of Another important aspect of the present invention is how 

these accidents can possibly be decreased. This is also an the user interfaces with Onboard Computer 20. FIG: 10 

important concept for vehicles other than on-the-road illustrates the user interface system as implemented in the 

vehicles, such as airplanes and marine vehicles. present invention. User Interface system 28 may employ a 

Vehicle acceleration is another important component of a 4s variety of different subsystems, singularly or in combination 
vehicle safety program. If vehicle acceleration is limited via with each other. One of the exciting new concepts to be 
Vehicle Acceleration subsystem 930, the user can only available involves SmartCard 1015 and SmartCard Reader 
accelerate the vehicle at a certain rate. This reduces the 1010. SmartCards are well known in the industry and ; will 
likelihood that younger users who enjoy the fast take-off not be described in detail here; but for the purpose of; this 
from a red light or stop sign would participate in such 50 invention, SmartCard 1015 contains at least Memory 1016 
activities. In the case of other vehicles, such as aircraft and which is read by SmartCard Reader 1010. When a user 
marine vehicles, vehicle acceleration may also be measured enters the vehicle, the user is identified by swiping Smart- 
in deceleration. Extremely rapid deceleration in an airplane Card 1015 in SmartCard Reader 1010. Onboard Computer 
or boat can cause the vehicle to become unstable. For 20 recognizes the input from SmartCard Reader 1010; and 
instance, in an aircraft extremely rapid deceleration may 55 accesses Memory 22 for information concerning the user. In 
cause the aircraft to flip or go into a spin that is not one embodiment, Onboard Computer 20 merely checks the 
recoverable because the vehicle's forward momentum has data available from Memory 1016 on SmartCard 1015 with 
been lost. Extremely rapid deceleration of a boat causes a the data for the particular user stored in onboard system 
wake of water to come over the stem of the boat, thus Memory 22. In other embodiments, Onboard Computer 20 
swamping the vehicle. Therefore, extremely rapid decelera- 60 works in concert with a processor (not shown) on SmartCard 
lion in aircraft or marine vehicles is highly undesirable. 1015 in a series of ID verification steps designed to authorize 

Another subsystem controlled by Engine Performance me user - 

system 900 is the Engine Emissions subsystem 940. While Another advantage of SmartCard 1015 is that SmartCard 

Engine Emissions subsystem 940 would generally be inac- Memory 1016 may contain other than merely numeric data, 

cessible to the vehicle's operators, it might be advantageous 65 Memory 1016 may include all data pertaining to the owner 

to reduce engine emissions even further below the Environ- of the SmartCard, including all user specific preferences 

mental Protection Agency (EPA) recommended standards. applied in setting the various functions and sub -functions of 
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the vehicle. Memory 1016 might also include user identifi- personal identification number is more than merely a num- 
cation data such as the user's fingerprint pattern, the user's ber. For instance, the personal identification number can 
voice print pattern, the user's iris print pattern or the user's actually be an operation the user applies to a number of an 
handwriting pattern. In one example, the card could actually 'algorithmic password.' An example of an algorithmic pass- 
initiate the authorization process via Onboard Computer 20. 5 word k t0 display a number to the user, such as '1234/ via 
The user would then be required to confirm identity on a GUI 1080 - algorithm known only to the user might be to 
second user interface, such as Fingerprint Reader 1020. subtract each of the outside digits from 10 and transpose the 
. _ _ _ _ . _j two inner digits. This, in response to seeing the number 
Importantly, SmartCart Memory 1016 can be used to store <1234 , ^ ^ { [he t ^ * n GU , 10g0 

user specific parameters for one vehicle or for several Eve n someone watching the user input that number would 

vehicles. In that same way, Memory 22 may store the user 10 ^ ^ ^ ^ m ^ ^ {q ^ 

specific parameters for all users authorized to operate the number> as ^ operation fa tao vm only to the user. More 

ve 1C e ' complicated algorithms can be formulated to test the dex- 

System fraud and vehicle theft could be greatly reduced if ler j ty 0 f the user. Such dexterity tests are well known as 

the intended user who has authorized SmartCard 1015 could effective in deterring intoxicated users and users who : are 

also be confirmed as the actual operator of the vehicle. The 15 incapable of safely operating a vehicle due to lack of sleep 

surest way to achieve this goal is to register some biological or illness. 

attribute of the user with the vehicle interface. The most In the ^al embodiment, User Interface 28 may include 

widely used biological attribute that identifies users is their Breathalyzer 1050 to test User's Breath 1055 for alcohol 

picture. The second most useful, and probably the easiest for ^ conlem . Auser tnal has been prone to drive while under the 

an onboard system to analyze, would be a user's fingerprint. j n fl ue nce of drugs or alcohol would be required to demon- 

In another embodiment of the present invention, once strate so briety before being allowed to operate the vehicle. 

SmartCard 1015 is read by SmartCard Reader 1010 and In this case, User's Breath 1055 can be analyzed by Onboard 

authorized by Onboard Computer 20, the user is then Computer 20 to detect the presence of known intoxicants, 

required to input User's Finger 1025 via Fingerprint Reader nG user may be ^ VGQ opportunities to pass the 

1020. Onboard Computer 20 then compares the user's breathalyzer test before the user is de-authorized and the 

fingerprint pattern to either a fingerprint identified with the vehicle is disabled by Onboard Computer 20. 

user's data stored in onboard Memory 22 or stored on FinaU a ^ ssessi a sufficie ntly high security 

SmartCard Memory 1016. Once .the user has been identified ]evel> such as a master ^ Qr an adminislrator> may 

by Onboard Computer 20 as the rightful possessor of the aulhorize subsequent' identification verification by proxy, 

SmartCard 1015, Onboard Computer 20 then allows the user (hereb ^ access t0 certain onboard s tems b users 

to access the highest level of security authorized within wMch have been denied access QD a verificaUon basis . ^ 

Onboard Computer 20. is an important feature for resolving idenufication verifica- 

Verification of a user's ID may be accomplished by a uon problems brought about by failure of an identification 

number of other means, including Touch Pad 1060 or 35 verification subsystem. 

Number Pad 1070 via Graphical User Interface (GUI) 1080. ^ i mportan t aspect of the present invention is that one or 

While GUI 1080 is advantageous, it is not essential to al j of thesc i den tification verification subsystems can be 

practice the present invention. In fact, GUI 1080 may included in User Interface system 28. The advantage of 

include Touch Pad 1060 or it may not, or it may include SmartCard 1015 is that it contains Memory 1016, which can 

Number Pad 1070 or it may not, or any one of the three 4Q be updated and obliterated while not in contact With 

could be used in combination. In another embodiment, the Onboard Computer 20. Unlike onboard computer Memory 

present invention may require user identification via a voice 2 2, SmartCard 1015 can be read and updated while the user 

print stored in system Memory 22 or on SmartCard 1015 ^ not in the veh i c le, in fact while the vehicle ^ not even ^ 

Memory 1016. In that case, User Interface system 28 lhe user > s posse ssion. Therefore, the user specific prefer- 

includes Microphone 1030. The user interfaces with the 45 ences stored on SmartCard Memory 1016 can be updated by 

system by inputting User's Voice 1035 to Microphone 1030 someone other than the user, placing the user at the mercy 

and then Onboard Computer 20 compares the voice pattern 0 f the fleet dispatcher or vehicle owner or parents; or 

with that of the user's voice pattern stored in system whomever is ultimately responsible for the vehicle. Also; the 

Memory 22 or SmartCard 1015 Memory 1016. SmartCard might contain user preferences for a variety of 

Other possible means of verifying the user's identity 5 0 different vehicles, 
include the user's iris pattern. In this case, CCD Camera Alternatively, SmartCard Memory 1016 contains user 
1040 would input an image of User's Eye 1045 to Onboard specified parameters in an independent device format By 
Computer 20 for analysis and comparison with an iris us i ng an independent device format for storing user speci- 
pattern stored in system Memory 22 or on SmartCard fled parameters, the user may set specified parameters which 
Memory 1016. In another embodiment, User Interface 28 55 are desired for use by a variety of different vehicles and 
might include a sample of the user's handwriting within vehicle types. The device-independent parameters would 
system Memory 22 or within SmartCard Memory 1016. The then be transformed into device-dependent parameters by 
user would input a pre-determined sentence or series of the onboard computer of any vehicle in which the Smart- 
words on Touch Pad 1060 as directed by the output of GUI Card is inserted. While some parameters may require some 
1080. Onboard Computer 20 then compares that series of 60 g D e tuning or tweaking once the user becomes accustomed 
slashes and gestures with the pattern stored in system to each different vehicle, the majority of the user specified 
Memory 22. parameters will fulfill the user's expectations without tweak- 
In another embodiment of the present invention, the user ing. Tremendous memory savings are achieved by storing 
is merely required to enter the proper personal User's PIN user specific parameters in device-independent format on the 
1075 via Number Pad 1070. Although generally the personal 65 SmartCard. Rather than storing multiple sets of user specific 
identification number is an unchanging number that the user parameters on a variety of different vehicles, the one set of 
always possesses, recently and with the advent of GUIs, the user specified parameters which is stored on the SmartCard 
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is transformed into device-dependent parameters by any will input another user's PIN or SmartCard and thus gain 

onboard computer of a specific vehicle into which the access to operate the vehicle under thief security level 

SmartCard is inserted. authorization, because Breathalyzer 1050 may administer 

FIG. 11 illustrates one embodiment of the present the sobriety test in either case. 

invention, that of a user being granted access to the user 5 ^ description of the present invention will now turn to 

specific preferences which modify the systems and sub- processes used in setting user preferences in accordance 

systems parameters. The process starts at step 1100. Initially, ™* \ P«f eren f , embodiment of the present invention. 

the system is set to detect a SmartCard (step 1102). If no FIGS ' f U throu * h 13 describe P rocesses used to set P refer " 

ences tor users 

SmartCard is detected, the system then requires the user to „ . ' .„.„„, 

enter a user ID number (step 1103). Onboard Computer 20 10 u Returning to FIG. 11, if Onboard Computer 20 confirms 

then checks system Memory 22 to determine if the user ID ' he use ' l ° have * master level secunty authorization on the 

is valid (step 1105). If the user ID is not valid, the user may bas ? of the user 10 number > ,he 18 granted access 

then be allowed to reenter the ID number several times (step t0 a11 s y stems K ^ um & master level xcunl y authonzation. 

1107). If validity remains unconfirmed, the process ends In on c e embodiment a user may only be allowed to reset 

(step 1150). Once the ID number is determined to be valid " specific preferences if the user affirms the intent to do so. In 

by Onboard Computer 20, it is then checked against the list ^ embodiment, the use would be quened as to whether he 

of master user ID numbers (step 1109). " mtends to reset aQ y of preferences or merely requires 

. , , . , . , , , „ access to the preferences that are available from Memory 22 

In the depicted example only two levels of secunty are ( m?) , f , he usef in , ends tQ ^ Dew ferenccs; the 

used for simplicity. In actuality, a user may be authonzed for usef woukJ be aUowed (o do SQ ( m9) ^ fcf . 

one or more security level(s). For instance, in addition to low £nces ^ £ither be stored automaticall in M 22 or 

level secunty or master level secunty, a user may also Uie user could be asked if the user intends to store them (step 

possess administrator level secunty, service attendant eve M shQwn) Qn ^ Qther hand ^ ^ ^ iM tQ 

secunty, parking attendant level security or semi-user level reset preferences . , n that case> Onboard Computer 

secunty Another, more specialized security level might also tem 20 would merel acc6SS usef rcfcrences from the 

be available for special purpose operation of the vehicle, m Me ^ ( lm) an(J , ^ , 0 . ^ 

such as thief level secunty and drunk driver level security, atroronriate svstems 

both of which severely limit access and performance of the n ^ . t . , -- rtft , rr% , , ~ A 

l • i t*l • 4l 4 t_ •:• • ^ Returning to block 1109, if Onboard Computer system 20 

vehicle. This would greatly aid authorities in curtailing a , . . ~, . , . . \ ir\ L 

. . . , r • c i_ determines that the user does not have a master ID number, 

user who has been convicted of a specific infraction by . . , . . . , . . . 

.. ... , *• r i5 i 30 then the user is quened whether the user intends to reset only 

limiting access and operation of a vehicle. ... . ^ t . w ^ JC 4 . ■ * j / 

& r non -critical preferences (step 1111). If the user intends to 

Therefore, a user who has been convicted of certain reset only n0Q -critical preferences, the user is allowed to do 

conduct involving the operation of a vehicle could be so ( step m3 ) as before. If the user intends only to access 

prohibited from using a vehicle in that manner via settings uscr pre f crenccs from Memory 22 (step 1115), then: the 

of user specific preferences that regulate that conduct. One 35 system merdy accesses the preferences stored in the system 

example is a user who has been convicted of driving at Memory 22 which are associated with the user ID number 

excessive speed. In order to prohibit this user from operating If ft fe delermined at sle 1102 that the user is usi a 

the vehicle at excessive speeds the administrator or other SmartCard> then 0n board Computer system 20 checks to 

user having a sufficiently high secunty level limits that determine if the SmartCard user number is valid (step 1104). 

user s vehicle maximum speed preference. 4Q If the SmartCard does not validate> the syslem cn6s the 

In one embodiment, Onboard Computer 20 evaluates the process (step 1150). If the SmartCard is valid, the process 

vehicle's operation looking specifically for enatic operating progresses down a parallel path using only the ID number, 

behavior such as swerving, excessive acceleration/ First, Onboard Computer 20 determines from system 

deceleration or speed, etc., and then de-authorizes the user Memory 22 whether it is a master use ID number (step 

from the present security level and re-authorizes the user in 45 noo). If it is a master ID number, the system then queries 

drunk driver level security. Thus, the performance param- the ^ as to intention of resetting preferences (step 1110). 

eters of the vehicle are automatically reset, limiting the xh e master ID designation might also reside on SmartCard 

performance of the vehicle, such as acceleration rate, maxi- 1015 Memory 1016. If the user intends to reset and enter 

mum speed limit and the like. Depending on the preferences new preferences, the user is allowed to do so (step 1112). If 

set by the administrator, once Onboard Computer system 20 50 DOt> the user merely accesses the preferences from the 

senses that the present operator should be de-authorized and SmartCard 1015 Memory 1016 (step 1114). Alternatively, 

re-authorized under the drunk driver security level, Onboard the preferences could be accessed from the system Memory 

Computer 20 initiates the sequence by completely 22 or by some combination from the SmartCard and the 

de-authorizing the user. De-authorizing the user causes the system Memory 22. If, on the other hand, the user's ID 

vehicle to come to rest by reducing the maximum vehicle 55 number was determined not to be a master ID number, then 

speed parameter, as described above. Then the user is forced the user is queried if he intends to reset only non-critical user 

to be re-authorized under the new drunk driver security preferences (step 1108). If the user intends not to reset 

level. This may include sobriety testing using Breathalyzer non-critical user preferences, the user then enters the pref- 

1QSQ> erences (step 1116). If the user intends not to reset hon- 

In addition, Onboard Computer 20 may evaluate the list 60 critical user preferences he accesses user preferences from 

of known users before granting authority under certain the SmartCard (step 1118). Clearly, whenever the user 

levels of security. An intoxicated driver might attempt to intends to enter new user specific parameters or preferences, 

circumvent security by gaining limited access in thief level the system will always use those preferences to replace 

security. However, Onboard Computer 20 will not authorize preferences that were available initially either from the 

a user under thief security level if another user on the list has 65 onboard system Memory 22 or SmartCard Memory 1016. In 

been authorized under the drunk driver security level. This any event, once the user specific preferences are available, 

precaution reduces the likelihood that an intoxicated driver Onboard Computer 20 transfers the user specific preferences 
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to the appropriate onboard systems and subsystems to 
modify the parameters of those systems and subsystems. 

FIGS. 12 and 13 illustrate one embodiment of that modi- 
fication process. The process starts at step 1200. Again, as in 
FIG. 11, the system looks to determine if a master user ID 
number is being input to the system (step 1202). If a master 
user ID number has been detected by Onboard Computer 20, 
the user may be required to verify the ID. This verification 
may employ any of the subsystems discussed above with 
respect to FIG. 10. For instance, the user may be required to 
input the user's fingerprint (1025) or voice (1035). The user 
may be required to look into a CCD Camera 1040 in order 
to uptake an image of the user's iris, or the user may be 
required to submit a brief handwriting sample 1065 via a 
touch pad 1060. Additionally, the user may be required to 
perform some operation with numbers displayed for the 
user. Onboard Computer 20 may then query the user as to 
intent to reset critical user preferences (step 1206). If a 
verification of the input was not required above at step 1204, 
the user then may be required to verify ID (step 1208). This 
would ensure that only persons with the appropriate level of 
security could reset critical parameters. Once Onboard Com- 
puter 20 determines that the master user ID number assigned 
to the user is valid, the user may then make changes to the 
master level security systems and subsystems. 

One important system not yet discussed is the ability to set 
and reset ID numbers and user specific parameters associ- 
ated with other ID numbers. This would allow master users 
to reset user specific parameters for other users and to 
authorize other users as master users. A master user may 
then go on to set other user specific preferences with respect 
to systems requiring a master level security to access. For 
example, the master user may reset the safety preferences 
(step 1212), engine performance preferences (step 1214), 
master ID preferences (step 1216), user preferences (step 
1218), navigational tracking preferences (step 1320) and the 
user's own user ID verification (step 1322). Next, Onboard 
Computer 20 may query the user as to intent of resetting 
non-critical parameters (step 1324). Assuming the user does 
not intend to reset these, the user then may be allowed to 
reset master security systems for other users (step 1326). 
Finally, the user is asked by the system to confirm the 
changes (step 1328). If the changes are not confirmed, the 
system restarts at step 1206. If the changes are accepted, 
then the user preferences are written to the SmartCard or to 
the system Memory 22 (step 1330). The process then ends 
at step 1350. 

If, on the other hand, at step 1202 the user's ID number 
is determined not to be a master user ID number, the system 
then may require additional verification as described above 
at step 1203. The system then queries the user as to intent to 
reset only non-critical preferences (step 1205). If the user 
intends to reset non-critical preferences, the user may then 
go to each of the non-critical systems and reset only the 
desired user specific parameters. For instance, the user may 
reset the comfort parameters (step 1207); he may reset the 
ride parameters (step 1209); he may reset the audio param- 
eters (step 1211); or he may reset communications/interface 
parameters (step 1213). As above, the user is then asked by 
Onboard Computer 20 through User Interface 28 if he 
accepts the changes (step 1215). If not, the process returns 
to step 1205 and the system asks if he intends to reset any 
non-critical user preferences. If he does intend to accept the 
changes, the user preferences are written to the SmartCard 
and/or system Memory 22 at step 1317. The process then 
ends at step 1350. 

FIGS. 14 to 21 illustrate the data structures of the present 
invention, which can be stored in SmartCard Memory 1016, 
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Onboard Computer 20 Memory 22, or even as encrypted 
information on a swipe card. At a low level, the data 
structure contains several fields of data which are unique to 
the user. User Record 1400 shows fields having user ID 
5 vertification, security level preference limits and user logged 
data. Each field of User Record 1400 is in turn dynamically 
linked to other lists containing more detail associated with 
the fields listed under User Record 1400. 

FIG. 15 illustrates the User ID data structure. User ID data 

10 structure 1500 has two fields, the user's name and the user's 
ID number. Either of these fields can be used as a means to 
identify a user and then retrieve data concerning the user 
from one of the above-mentioned memories. 
FIG. 16 illustrates the Verification data structure 1600. 

15 Once the user has been identified, a verification sequence 
takes place as described above discussing User Interface 28. 
Pertinent data used in identification of the user are stored in 
Verification 1600 data structure or, alternatively, finks may 
be provided for memory addresses where pertinent data is 

20 located in memory. Verification 1600 data structure contains 
a password known only to the user which may be in the form 
of a pin number, algorithmic password, handshake data for 
verifying the user's SmartCard, pertinent finger print data, 
eye print data, voice print data, and finally, a field for 

25 verifying a proxy which has been authorized by a user at the 
master security level or higher. The information contained in 
these fields is used to verify that the person intending to 
operate the vehicle is actually the person who is identified in 
User ID 1500. 

30 

FIG. 17 illustrates Security Level data structure iy00. 
Once positive identification of the user has been established, 
the user is granted a security level by Onboard Computer 20. 
Security Level 1700 data structure shows different levels of 

35 security. As mentioned before, these are normal user, master 
user, administrator, service center, parking attendant or 
semi-user, thief and, finally, drunk driver. Each level of 
security authorizes the user to access a prescribed set of 
preferences and preference limits that are associated with 

40 that particular security level. As described above, a normal 
user is grated access to all of the non-critical systems of the 
vehicle. Therefore, the normal user can then re-set prefer- 
ences in any one of those non-critical systems or sub- 
systems. A master user, on the other hand, is given access to 

45 even more preferences, including the more critical systems. 
A master user can not only set preferences associated with 
the non-critical systems, but can also set preferences asso- 
ciated with the critical systems. 

FIG. 18 illustrates an extremely abbreviated data structure 

50 of possible Preferences. Preferences 1800 data structure 
includes seat adjustments, temperature adjustments, radio/ 
entertainment system adjustments, telephone number 
settings, ride preferences, acceleration preferences, warning 
message preferences and airbag settings fields. In actuality, 

55 the number of potential preferences to be set would at least 
be equal to the number of subsystems being controlled by 
Onboard Computer 20 and may include many times more, as 
each subsystem may have several associated user specific 
preferences. An administrator, however, may be authorized 

60 to do more than set preferences, whether critical or non- 
critical. An administrator may be authorized to set prefer- 
ence limits for all users of the particular vehicle. 

FIG. 19 illustrates Preference Limits 1900 data structure. 
In many ways, preference limits would act as system default 

65 preferences. Once preference limits are entered in the fields 
associated with Preference Limits 1900 data structure, they 
would be retaining in Onboard Computer 20 Memory 22 as 
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the system defaults. In this example, preference limits can 
only be reset by a user having an administrator security 
level. Therefore, while certain users such as master level 
users may be able to adjust user specific preference settings 
within these limits, a master user may not be able to adjust 5 
user specific preferences above the preference limits. 

FIG. 20 illustrates User Logged Data 2000 data structure. 
As briefly discussed above, User Logged Data 2000 data 
structure is indexed by user and compiled by Onboard 
Computer 20 from events occurring during the user's control 10 
of the vehicle. For instance, the first three fields contain 
routine maintenance and operator log information, hours of 
engine time, hours logged in and miles traveled. The fourth 
field concerns the amount of money that was spent by the 
user. In one embodiment, the SmartCard may have a pre- 15 
determined cash value. As the user proceeds along the trip 
and consumes goods and services needed during that trip, 
the amount of cash consumed could be automatically logged 
in this field. Other fields concerning the vehicle's operation 
include maximum speed attained,- the average speed 20 
maintained, the average acceleration, maximum engine 
RPM, data regarding antilock brake engagement, traction 
control data and data regarding airbag deployment. 

Other fields that might be useful for an administrator or 
persons having responsibility for the vehicle, might be the 25 
maximum distance from home the vehicle traveled, the 
maximum distance from a set route the vehicle traveled, the 
maximum distance tracked from a pre -set destination and a 
GPS trip backing field. A GPS trip tracking field would 
probably be finked to graphic data compiled by Navigation 30 
and Tracking system 600 using Maps and Databases sub- 
system 620 and GPS system 610. There, an administrator 
could view a graphic image of the exact routes the vehicle 
traveled, including time annotations. 

Finally, a field for services used while a particular user 
operated the vehicle is provided. This also may be linked to 
another list tracking such things as the amount of fuel 
purchased, services rendered to the vehicle such as washings 
or lube jots, etc. or towing amounts. 4Q 

FIG. 21 illustrates an example of how Onboard Computer 
20 authorizes user specific preferences by user security 
level. In the example in FIG. 21", Security Level 1700 data 
structure indicates that the user has been identified as a 
normal user. This is seen as the normal user field being 45 
highlighted while the remaining user fields are 
de-emphasized and presented in italics. When Preferences 
1800 data structure is pulled up for the user authorized as a 
normal user, certain fields remain active while other fields 
are de-activated. Active fields for a normal user would 50 
include such preferences as seat adjustments, temperature 
adjustments, radio/entertainment system adjustments, tele- 
phone number settings and ride preferences. Preferences not 
under the control of a normal user might be acceleration, 
warning message preferences and airbag settings. This is an 55 
important concept because, while a user may be allowed to 
set the user's own specific preferences in every field, 
Onboard Computer 20 will only accept those fields which 
have been authorized under that security level. 

In the depicted example, a normal user is not authorized 60 
to set acceleration preferences, warning message prefer- 
ences or airbag settings. Therefore, even if a user record 
contains entries in those fields, Onboard Computer 20 uses 
the default settings already available to it in Memory 22, 
which were preset by a system administrator, thereby pro- 65 
hibiting the normal user from inputting the entries in those 
fields. 
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It is important to note that while the present invention has 
been described in the context of a fully functioning data 
processing system, those of ordinary skill in the art .will 
appreciate that the processes of the present invention are 
capable of being distributed in a form of a computer readable 
medium of instructions and a variety of forms, and that the 
present invention applies equally regardless of the particular 
type of signal bearing media actually used to carry out the 
distribution. Examples of computer readable media include 
recordable-type media such a floppy disc, a hard disk drive, 
a RAM, CD-ROMs, and transmission-type media such as 
digital and analog communications links. 

The description of the present invention has been pre- 
sented for purposes of illustration and description but is not 
limited to be exhaustive or limited to the invention in the 
form disclosed. Many modifications and variations will be 
apparent to those of ordinary skill in the art. The embodi- 
ment was chosen and described in order to best explain the 
principles of the invention and the practical application, and 
to enable others of ordinary skill in the art to understand the 
invention for various embodiments with various modifica- 
tions as are suited to the particular use contemplated. 

What is claimed is: 

1. A method for modifying an onboard data processing 
system in a vehicle using user specific data parameters, the 
method comprising: 

invoking a user identification feature; 
accessing an onboard memory for user identification 
information; 

identifying a user using the user identification feature, in 

accordance with the user identification information, 

wherein the user is an identified user; 
accessing the onboard memory for a security level for the 

identified user; 
authorizing the identified user at a predetermined user 

security level; 

unlocking control of at least one onboard system, wherein - 

the at least one unlocked onboard system requires a 

user security level equal to the predetermined user 

security level for the identified user; 
accessing a portable memory for at least one user specific 

data parameter; 
applying the at least one user specific data parameter^ a 

locked onboard system; and 
modifying at least one function of the locked onboard 

system in accordance with the at least one user specific 

data parameter, 

2. The method of claim 1 wherein the at least one user 
specific data parameters includes one of comfort parameters, 
performance parameters and safety parameters. 

3. The method of claim 1 wherein the user identification 
feature includes one of a personal identification number, 
password, algorithmic password, voice pattern, fingerprint 
pattern, iris pattern and handwriting pattern. 

4. The method of claim 1 wherein the onboard system 
includes one of climate control, seat adjustment, mirror 
adjustment, engine performance, suspension adjustment, 
ride control, user dexterity testing, user sobriety testing, 
vehicle speed limitation, vehicle acceleration limitation, 
vehicle navigation, vehicle tracking, vehicle use log, airbag, 
user restraint, buoyancy, plane, theft deterrence and user 
qualification verification. 

5. The method of claim 1 further comprises: 

storing at least one user specific data parameter in the 
portable memory. 
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6. The method of claim 1 further comprises: 
modifying at least one user specific parameter; and 
storing the modified at least one user specific data param- 
eter in the portable memory. 

7. The method of claim 1, the step of authorizing further 
comprises: 

sensing a biological user identification feature; 

transforming the sensed biological user identification fea- 
ture to biological user identification feature data; 

accessing the onboard memory for data corresponding to 
the biological user identification feature; 

comparing the biological user identification feature data 
to the data corresponding to the biological user iden- 
tification feature; and 

unlocking at least one onboard system based on compari- 
son. 

8. The method of claim 1 wherein the vehicle is one of an 
automobile, off-road vehicle, truck, train, power boat, sail 
boat, barge, powered aircraft, airplane and sailplane. 

9. The method of claim 1 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined loca- 
tion. 

10. The method of claim 1 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined route. 

11. The method of claim 1 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined location 
off of a preset route. 

12. The method of claim 1 further comprises: 
defining a user specific limiting parameter for limiting the 

magnitude of the user specific parameter applied to the 
onboard system. 

13. An onboard data processing system for implementing 
user specific data parameters, the system comprising: 

invoking a user identification feature; 

accessing means for accessing an onboard memory for 
user identification information; 

identifying means for identifying a user using the user 
identification feature, in accordance with the user iden- 
tification information, wherein the user is an identified 
user; 

accessing means for accessing the onboard memory for a 

security level for the identified user; 
authorizing means for authorizing the identified user at a 

predetermined user security level; 
unlocking means for unlocking control of at least one 

onboard system, wherein unlocking control of the at 

least one onboard system requires a user security level 

equal to the predetermined user security level for the 

identified user; 
accessing means for accessing a portable memory for at 

least one user specific data parameter; 
applying means for applying the at least one user specific 

data parameter to a locked onboard system; and 
modifying means for modifying at least one function of 

the locked onboard system in accordance with the at 

least one user specific data parameter. 

14. The system of claim 13 wherein the at least one user 
specific data parameter includes one of comfort parameters, 
performance parameters and safety parameters. 

15. The system of claim 13 wherein the user identification 
feature includes one of a personal identification number, 
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password, algorithmic password, voice pattern, fingerprint 
pattern, iris pattern and handwriting pattern. 

16. The system of claim 13 wherein the onboard system 
includes on of climate control, seat adjustment, mirror 
adjustment, engine performance, suspension adjustment, 
ride control, user dexterity testing, user sobriety testing, 
vehicle speed limitation, vehicle acceleration limitation, 
vehicle navigation, vehicle tracking, vehicle use log, airbag, 
user restraint, buoyancy, plane, theft deterrence and user 
qualification verification. 

17. The method of claim 13 further comprises: 
storing means for storing at least one user specific data 

parameter in the portable memory. 

18. The method of claim 13 further comprises: 
modifying means for modifying at least one user specific 

parameter; and 
storing means for storing the modified at least one user 
specific data parameter in the portable memory. 

19. The method of claim 13, the authorizing further 
comprises: 

sensing means for sensing a biological user identification 
feature; 

transforming means for transforming the sensed biologi- 
cal user identification feature to biological user identi- 
fication feature data; 

accessing means for accessing the onboard memory for 
data corresponding to the biological user identification 
feature; 

comparing means for comparing the biological user iden- 
tification feature data to the data corresponding to the 
biological user identification feature; and 

unlocking means for unlocking at least one onboard 
system based on comparison. 

20. The system of claim 13 wherein the vehicle is one of 
an automobile, off-road vehicle, truck, train, power boat, sail 
boat, barge, powered aircraft, airplane and sailplane. 

21. The method of claim 13 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined loca- 
tion. 

22. The method of claim 13 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined route. 

23. The method of claim 13 wherein the user specific 
parameter includes limitation on the maximum distance the 
vehicle is authorized to travel from a predetermined location 
off of a preset route. 

24. The method of claim 13 further comprises: 
defining means for defining a user specific limiting 

parameter for limiting the magnitude of the user spe- 
cific parameter applied to the onboard system. 

25. A computer program product including instructions 
for modifying an onboard data processing system by imple- 
menting user specific data parameters embodied on a com- 
puter readable medium, the instructions comprising: 

invoking instructions for invoking a user identification 
feature; 

accessing instructions for accessing an onboard memory 
for user identification information; 

identifying instructions for identifying a user using! the 
user identification feature, in accordance with the user 
identification information, wherein the user is an iden- 
tified user, 

accessing instructions for accessing the onboard memory 
for a security level for the identified user; 
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authorizing instructions for authorizing the identified user 
at a predetermined user security level; 

unlocking instructions for unlocking control of at least 
one onboard system, wherein unlocking control of the 
at least one onboard system requires a user security 5 
level equal to the predetermined user security level for 
the identified user, 

accessing instructions for accessing a portable memory 
for at least one user specific data parameter; 

applying instructions for applying the at least one user 
specific data parameter to a locked onboard system; and 

modifying instructions for modifying at least one function 
of the locked onboard system in accordance with at 
least one user specific data parameter. 15 

26. The computer program product of claim 25 further 
comprises: 

instructions for modifying at least one user specific 
parameter; and 

instructions for storing the modified at least one user 20 
specific data parameter in the memory. 

27. The computer program product of claim 25, the 
instruction of authorizing further comprises: 

instructions for sensing a biological user identification 
feature; 25 

instructions for transforming the sensed biological user 
identification feature to biological user identification 
feature data; pi instructions for accessing the onboard 
memory for data corresponding to the biological user 3Q 
identification feature; 

instructions for comparing the biological user identifica- 
tion feature data to the data corresponding to the 
biological user identification feature; and 

instructions for unlocking at least one onboard system 35 
based on comparison. 

28. The computer program product of claim 25 further 
comprises: 

instructions for defining a user specific limiting parameter 
for limiting the magnitude of the user specific param- 40 
eter applied to the onboard system. 

29. A method for modifying an onboard data processing 
system in a vehicle using user specific data parameters, the 
method comprising: 

invoking a user identification feature; 45 

accessing an onboard memory for authorized user iden- 
tification information; 

receiving user identification information from a user 
attempting to be authorized; 50 

comparing the user identification information with the 
authorized user identification information; 

authorizing the user based on the outcome of the com- 
parison; 

accessing the onboard memory for user security level 55 
information in response to the user being authorized; 

determining a security level for the authorized user; 

unlocking control of a plurality of onboard systems, 
wherein control of the plurality of onboard systems 60 
requires a user security level equal to the security level 
for the identified user; 
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receiving a plurality of user specific data parameters from 
a portable memory, wherein the plurality of user spe- 
cific data parameters correspond to a plurality of spe- 
cific onboard systems; 

applying the plurality of user specific data parameters to 
the plurality of locked onboard systems; and 

modifying functions of the plurality of locked onboard 
system in accordance with the plurality of user specific 
data parameter. 

30. The method of claim 29 wherein the portable memory 
is contained on a smart card, prior to invoking a user 
identification feature the method further comprises: 

invoking a smart card user identification feature; 
accessing the portable memory for smart card authorized 

user identification information; 
receiving user identification information from a user 

attempting to be authorized by the smart card; 
comparing the user identification information with the 

smart card authorized user identification information; 

and 

authorizing the user for the smart card based on the 
outcome of the comparison. 

31. The method of claim 30, wherein the at least one 
critical onboard system includes at least one of an onboard 
safety system, an onboard engine performance system; and 
an onboard user identification feature. 

32. The method of claim 29, wherein the authorized user 
is determined to have a high security level, the method 
further comprises: 

resetting critical user parameters for at least one critical 
onboard system, wherein critical user parameters are 
included in user specific data parameters and the at 
least one critical onboard system is included in : the 
plurality of onboard systems. 

33. The method of claim 29, wherein the authorized user 
is determined to have a predetermined security level, the 
method further comprises: 

monitoring vehicle operating characteristics; 

comparing the monitored operating characteristics to a 
predefined set of operating characteristics for the pre- 
determined security level; 
. reducing the user security level based on comparing the 
monitored operating characteristics to a predefined set 
of operating characteristics; and 

locking control of at least one onboard system, wherein 
control of the at least one onboard system requires a 
higher user security level than the reduced user security 
level for the identified user. 

34. The method of claim 33 further comprises: 
receiving default data parameters from the onboard 

memory, wherein the default data parameters corre- 
spond to the at least one onboard system requiring a 
higher user security level than the reduced user security 
level for the identified user; 

applying the default data parameters to the at least; one 
onboard systems; and 

modifying functions of the at least one of onboard system 
in accordance with the default data parameters. 
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